Asset management
What you own, who owns it, and what it is exposed to.
Asset register
Assets with ownership, classification and criticality, linked to the risks, vulnerabilities and controls that touch them. "What is exposed" becomes a query rather than a spreadsheet exercise.
Key capabilities
- Ownership, classification and criticality
- Links to risks, vulnerabilities, controls and configuration items
- Asset compliance heatmap
- CSV import
Configuration management (CMDB)
A configuration-item register with a graph of how items relate. Import from CSV to get started, then keep the links that let a change request show its blast radius, so you answer "what else does this touch" before a change rather than after an incident.
Key capabilities
- Configuration items with attributes and relationships
- Configuration-item graph
- CSV import and bulk update
- Links to assets and changes
Proof point
A change linked to its configuration items shows its blast radius before it runs, so "what else does this touch" is answered before the change, not in the incident review.
Questions about this module
Does the inventory replace our CMDB?
For compliance purposes, yes. If you run a CMDB or MDM already, Certifyi reads from it through integration rather than duplicating it.
What about laptops and phones?
Endpoint protection and MDM integrations list devices with encryption, patch and protection status, which is exactly what Cyber Essentials and SOC 2 endpoint controls require.
How does this help with CMMC?
CMMC assessment starts with the CUI boundary. The inventory tags every asset that stores, processes or transmits CUI, which becomes the System Security Plan scope.